diff options
| author |  Dimitri John Ledkov <dimitri.ledkov@canonical.com>
| 2023-10-10 22:27:55 +0100 |
|---|---|---|
| committer |  Herbert Xu <herbert@gondor.apana.org.au>
| 2023-10-20 13:39:26 +0800 |
| commit | d4f5bfe20da9fa54024a73a9c60aea45e572d786 (patch) | |
| tree | a96f98c4ba9daf369dadce52be7f999fcde8c65e /crypto/lskcipher.c | |
| parent | module: Do not offer sha224 for built-in module signing (diff) | |
| download | linux-d4f5bfe20da9fa54024a73a9c60aea45e572d786.tar.gz linux-d4f5bfe20da9fa54024a73a9c60aea45e572d786.tar.bz2 linux-d4f5bfe20da9fa54024a73a9c60aea45e572d786.zip | |
certs: Limit MODULE_SIG_KEY_TYPE_ECDSA to SHA384 or SHA512
NIST FIPS 186-5 states that it is recommended that the security
strength associated with the bit length of n and the security strength
of the hash function be the same, or higher upon agreement. Given NIST
P384 curve is used, force using either SHA384 or SHA512.
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/lskcipher.c')
0 files changed, 0 insertions, 0 deletions